Resolve checked recipient runtime evidence

Require a current-user Internal token and internal service key, resolve the canonical recipient binding, and verify an exact Rails-linked partial assistant and genuine human source. Return recipient-safe request state with complete observed text/descriptors from at most 20 sources and 64 KiB; ordinary authorized chats return null. This read cannot create messages or accept an outcome.